This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft
File:                     LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json)
Hash identifier:          vufRwccWMuv4qTkLgc5p4IeBthSYnm0K5e3WPuOKmus=
Subject key identifier:   69:A4:6E:3A:D8:47:2A:DB:FC:34:71:57:06:74:A4:BC:FF:72:F0:17
Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61
Certificate issuer:       /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961
Certificate serial:       087F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft
Manifest number:          086F
Signing time:             Thu 04 Dec 2025 19:43:55 +0000
Manifest this update:     Thu 04 Dec 2025 19:43:55 +0000
Manifest next update:     Thu 11 Dec 2025 19:43:55 +0000
Files and hashes:         1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: MzJcHtyYkyOdunfP8/FS0kcbPZbacFGkTtMMhEhBOXw=)
                          2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: IgMQ6bjceMEjNxtoYsUzqIdvcKKluE/pVcpXGCEMr1A=)
                          3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: 4Kz/gb1MnYaV74RbCJyZRYORl5E6fIDMvNU65k0KJvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl
                          rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175 (0x87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961
        Validity
            Not Before: Dec  4 19:43:55 2025 GMT
            Not After : Dec 11 19:43:55 2025 GMT
        Subject: CN=6931e47b-8d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:f0:47:c8:46:2a:ff:24:57:46:d6:75:f2:
                    19:84:f2:ff:33:80:0d:41:ae:1c:cf:43:3a:7f:a2:
                    43:fb:3a:01:e2:99:c8:33:6d:23:38:7c:32:93:fa:
                    a8:7e:4a:43:aa:f3:64:11:71:07:03:aa:05:da:6a:
                    c6:e5:73:22:77:3c:b3:dc:58:b8:1b:cd:c4:66:50:
                    6b:17:fd:e6:21:25:ec:3b:6f:c0:2b:ed:90:11:af:
                    6f:a0:95:ae:22:8c:cc:4d:d9:cf:8a:25:03:aa:a7:
                    9d:50:7f:ed:d8:78:f7:7a:e0:d7:4a:44:1c:ef:3f:
                    e4:d9:ea:1c:86:37:a0:57:6c:6e:0a:d6:2d:4d:95:
                    ca:70:b7:cd:e7:f2:55:60:f1:6a:69:6a:0d:d0:4c:
                    6e:a7:30:fa:32:94:df:6e:76:7f:a7:c3:12:bc:b1:
                    94:79:76:5e:03:ba:18:19:18:f8:87:09:4a:b5:a9:
                    10:a7:92:92:83:94:0e:f6:b1:87:4d:1b:55:de:d4:
                    7f:94:39:6f:2d:e3:0a:31:3b:22:25:de:dd:20:6a:
                    73:5b:de:44:b9:b2:df:da:19:12:73:2c:d8:1b:b1:
                    78:f9:b8:70:9b:e3:f7:e6:69:d9:c8:71:88:b8:ff:
                    9b:b8:bc:c3:bc:fc:d7:45:9b:54:5c:4e:e8:68:10:
                    3a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A4:6E:3A:D8:47:2A:DB:FC:34:71:57:06:74:A4:BC:FF:72:F0:17
            X509v3 Authority Key Identifier:
                keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2c:2b:61:6e:fb:38:77:ea:38:40:3d:56:ad:80:0f:6d:d3:
         d7:f4:e2:98:e7:e1:7c:93:1f:e1:d6:c8:22:5e:65:0d:62:4d:
         38:00:ae:6d:4e:a0:24:d7:ac:d2:69:06:72:40:2d:47:6c:49:
         8e:5a:5a:09:bd:6c:82:9a:f9:63:6c:3e:a1:2d:de:12:82:52:
         98:84:fe:aa:b3:a7:a1:63:81:a1:59:60:22:63:e5:b7:87:88:
         b7:8c:3f:4d:c9:6b:1f:1e:66:91:04:88:32:5e:10:ba:ec:22:
         71:cb:4f:75:8a:c1:7e:7b:ba:de:f3:b6:97:d6:ea:b0:f3:ca:
         99:fe:6f:b6:3b:ca:4a:e5:b8:fa:96:ce:e4:ec:9e:04:21:f6:
         b7:6e:b8:22:25:9f:36:ed:74:af:07:ca:21:ed:18:51:05:3a:
         b1:c9:f1:c7:a6:a0:66:26:7f:0e:30:d7:0f:af:dd:57:32:9b:
         23:df:bb:5f:9f:ff:0e:56:71:39:51:ca:cd:6d:e9:d1:ba:20:
         84:94:bf:41:4c:5b:35:3b:fc:be:c6:0a:04:f1:74:20:94:56:
         cf:92:10:2c:ea:0e:e5:89:4a:ef:f2:e1:05:fa:7f:fa:e1:ed:
         b7:7b:5c:dc:ce:bc:55:96:95:10:a8:b9:e2:d7:37:5f:a6:af:
         fd:46:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:36 2025 by rpki-client